CVE-2024-23241 is a vulnerability in Apple's UIKit framework on iOS and iPadOS that could allow a malicious app to break out of its sandbox and leak sensitive user information. The underlying issue was addressed by removing the vulnerable code, improving state management and preventing unauthorized data access. This vulnerability is fixed in iOS 17.4 and iPadOS 17.4. The CVSS v3.1 score is 6.5 (medium severity) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N, indicating network attack vector, low attack complexity, no privileges or user interaction required, and impact on confidentiality and integrity but not availability.

An attacker controlling a malicious app could exploit this vulnerability to escape the app sandbox and access sensitive user information, potentially compromising user privacy and data confidentiality. The integrity of user data could also be affected. There is no indication of impact on system availability. No known exploits in the wild have been reported at this time.

Apple has released official patches addressing this vulnerability in iOS 17.4 and iPadOS 17.4. Users and administrators should update affected devices to these versions or later to remediate the issue. Since the fix involves removing vulnerable code and improving state management, no additional mitigations are necessary beyond applying the official update.